• The KIPS Transactions:PartC
• /
• v.18C no.6
• /
• pp.379-388
• /
• 2011

Ensuring the security of medical records is becoming an increasingly important problem as modern technology is integrated into existing medical services. As a consequence of the adoption of EMR(Electronic Medical Records) in the health care sector, it is becoming more and more common for a health professional to edit and view a patient's record. In order to protect the patient's privacy, a secure authentication model to access the electronic medical records system must be used. A traditional identity based digital certificate for the authenticity of EMR has private key management and key escrow of a user's private key. In order to protect the EMR, The traditional authentication system is based on the digital certificate. The identity based digital certificate has many disadvantages, for example, the private key can be forgotten or stolen, and can be easily escrow of the private key. Nowadays, authentication model using fingerprint recognition technology for EMR has become more prevalent because of the advantages over digital certificate -based authentication model. Because identity-based fingerprint recognition can eliminate disadvantages of identity-based digital certificate, the proposed authentication model provide high security for access control in EMR.

• Health Policy and Management
• /
• v.7 no.2
• /
• pp.109-146
• /
• 1997

This study explores the feasibility of activating private health insurance in Korea. The rationale for expanding private supplementary health insurance can be found in many cases of health care reforms in the European countries. Private health insurance can not only relieve the financial distress of the government health insurance programs but also offer the medical institutions incentives to improve the quality of medical care. In Korea there is no supplementary health insurance that reimburses for various kinds of diseases based on a well designed fee schedule. Recently, the cancer insurance is the best seller in the health related insurance market. As observed in the U. S. case, the cancer insurance which pays the predetermined amount (indemnity coverage) regardless of the medical charges incurred to the patient is limited in its coverage for the insured. To provide better protection against catastrophic diseases, the government should give insurance companies incentives to develop health insurance products that cover multiple diseases rather than a single disease. Consumers can hardly understand and compare complex insurance products. To resolve the information asymmetries, the government should publish a consumer report that compare various health insurance products in a user friendly way. In the long run, insurance companies will plan to sell health insurance products that charge risk related premium only when insurers accumulate the underwriting know-hows, the government shares data on various health statistics including claims and demographics, and risk pool for high risk patients is well established and subsidized by the government.

• Journal of agricultural medicine and community health
• /
• v.37 no.2
• /
• pp.84-95
• /
• 2012

Background: In Korea, private health insurance has neglected to induce externality on national health insurance by moral hazard. Therefore, we conducted this study in order to explore the influence of private health insurance on unnecessary medical utilization among patients with cervical or lumbar sprain. Method: The study examined a population of 449 patients (admission, 384; out-patient; 85) diagnosed with simple cervical or lumbar sprain without neurological symptoms at 20 small hospitals or clinics in Gwangju and Jeollanam provinces from Jul. 1 to Aug. 31 2008. The data were collected using structured, self-administrated questionnaire which collected information such as whether or not the patient was admitted (as a dependent variable), whether or not they had private health insurance (as a independent variable), and covariates such as socio-demographic characteristics, the factors related to the sprain, and characteristics of the insurance provider. Results: From hierarchical multiple logistic regression analysis, it was found that the admission rate of patient with private health insurance was higher than that those without it (Odds ratio=3.31, 95% Confidence interval; 1.14-9.58), meaning that private health insurance was an independent factor influencing the admission of patients with these conditions. Other determinants of admission were patient age and physician referral. Conclusions: This study is the first empirical study to explore the influence of private health insurance on inducing moral hazard in admission services, specifically among patients with cervical or lumbar sprain. Regulation of benefits provided by private health insurance may be necessary, as the effect of this moral hazard may mean existence of externality.

• Journal of Korean Society for Quality Management
• /
• v.51 no.2
• /
• pp.203-221
• /
• 2023

Purpose: The purpose of the research is to explore the role of social media in attracting international patients for cosmetic services in South Korea during the COVID-19 pandemic. The study aims to conceptualize social media as an effective marketing tool for minimizing perceived risks associated with cosmetic services and increasing patient satisfaction. Methods: The study validated proposed hypotheses using the PROCESS macro for SPSS with overseas patients who received cosmetic treatment in private Korean plastic surgery clinics in Busan. Results: This study found that information delivery capability reduced perceived risk and contributed to patient satisfaction, while communication capability did not show any significant relationship with perceived risk and satisfaction. In addition, information delivery capability had a significant direct effect on patient satisfaction, but communication capability did not. Conclusion: It is expected that the outcomes of this study will broaden our understanding of the use of social media in reducing perceived risk and increasing satisfaction.

• Journal of Society of Preventive Korean Medicine
• /
• v.18 no.3
• /
• pp.11-21
• /
• 2014

The rapid development and distribution of information communication industry facilitates the changes of hospital administration, introducing EMR(Electronic Medical Record) instead of paper-based medical record in the medical field. The developed countries such as U.S. have established EMR system after in the middle of 1970s because the primary advantages of EMR is to store and handle vast amounts of records efficiently and increase the quality of health care. Most of health organizations in Korea also apply medical record system to their administration. As the result, they have accomplished a scientific administration system through the use of medical record to handle a variety of patient's information including patient's confidentiality and privacy such as family history, social status, income level, and so on. However, access to and the misuse of EMR causes illegal infringement of patient's information and finally it becomes a very serious medical issue. Potential leakage and misuse of records may seriously infringe patient's privacy rights. In this respect, the related agencies in the public and private sector have been making efforts to prevent patient's records leakages. Especially, the revision bill of Medical Law in 2002 establishes the ways on the security and standards of electronic records. However, it does not provide the proper guidelines which is applied to the rapid changes of the medical environment. One of the most priorities in the hospital administration is the production and maintenance of an accurate medical records fulfilled by medical recorders. Therefore, it is very important for health care providers to hire ethical-based medical recorders. But, unfortunately most of hospitals overlook the importance of their roles. All parts including government, physician and patient must have more concerns on the problems related to EMR. Therefore, this study aims to propose the proper ways to resolve the problems coming from EMR.

• Journal of Digital Convergence
• /
• v.11 no.11
• /
• pp.479-490
• /
• 2013

In this research we surveyed level of textual recognition and of practice by nursing students regarding patient privacy protection. The subjects were 383 nursing students. The questionnaire developed by Lee and Park (2005) were modified and used. Data analysis was conducted through descriptive statistics, t-test, ANOVA, and Pearson correlation coefficients. The result shows that about 96.1% of the subjects received education on patient privacy protection in school or hospital but 48.0% of all received education of 10 minutes or less. Average score for recognition of patient privacy protection was a 4.13 but average practice score was 3.84. Among all areas, communication tasks showed the highest scores for both recognition and practice. There are differences according to grade in school and age of the subject, and experience with clinical practice, existence of regular educational program embedded in clinical practice at hospitals, and the length of each educational session. For both total score and score for every domain, there was a correlation between recognition and practice. The conclusions drawn from this research will help colleges of nursing and hospitals to design and develop contents of educational programs for nursing students.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2012.11a
• /
• pp.1321-1322
• /
• 2012

With the advance of Information Technology (IT) and dynamic requirements, diverse application services have been provided for end users. With huge volume of these services and information, users are required to acquire customized services that provide personalized information and decision at particular extent of time. The case is more appealing in healthcare, where patients wish to have access to their medical record where they have control and provided with recommendation on the medical information. PHR (Personal Health Record) is most prevailing initiative that gives secure access on patient record at anytime and anywhere. PHR should also incorporate decision support to help patients in self-management of their diseases. Available PHR system incorporates basic recommendations based on patient routine data. We have proposed decision support service called "Smart CDSS" that provides recommendations on PHR data for diabetic patients. Smart CDSS follows HL7 vMR (Virtual Medical Record) to help in integration with diverse application including PHR. PHR shares patient data with Smart CDSS through standard interfaces that pass through Adaptability Engine (AE). AE transforms the PHR CCR/CCD (Continuity of Care Record/Document) into standard HL7 vMR format. Smart CDSS produces recommendation on PHR datasets based on diabetic knowledge base represented in shareable HL7 Arden Syntax format. The Smart CDSS service is deployed on public cloud over MS Azure environment and PHR is maintaining on private cloud. The system has been evaluated for recommendation for 100 diabetic patients from Saint's Mary Hospital. The recommendations were compared with physicians' guidelines which complement the self-management of the patient.

• Journal of Korea Society of Digital Industry and Information Management
• /
• v.5 no.3
• /
• pp.127-133
• /
• 2009

The pre-existing medical treatment was done in person between doctors and patients. EMR (Electronic Medical Record) System computerizing medical history of patients has been proceed and has raised concerns in terms of violation of human right for private information. Which integrates "Identification information" containing patients' personal details as well as "Medical records" such as the medical history of patients and computerizes all the records processed in hospital. Therefore, all medical information should be protected from misuse and abuse since it is very important for every patient. Particularly the right to privacy of medical record for each patient should be surely secured. Medical record means what doctors put down during the medical examination of patients. In this paper, we applies fingerprint identification to EMR system login to raise the quality of personal identification when user access to EMR System. The system implemented in this paper consists of embedded module to carry out fingerprint identification, web server and web site. Existing carries out it in client. And the confidence of hospital service is improved because login is forbidden without fingerprint identification success.

• International Journal of Computer Science & Network Security
• /
• v.21 no.8
• /
• pp.254-266
• /
• 2021

The Internet of Medical Things (IoMTs) are to be considered an investment and an improvement to respond effectively and efficiently to patient needs, as it reduces healthcare costs, provides the timely attendance of medical responses, and increases the quality of medical treatment. However, IoMT devices face exposure from several security threats that defer in function and thus can pose a significant risk to how private and safe a patient's data is. This document works as a comprehensive review of modern approaches to achieving security within the Internet of Things. Most of the papers cited here are used been carefully selected based on how recently it has been published. The paper highlights some common attacks on IoMTs. Also, highlighting the process by which secure authentication mechanisms can be achieved on IoMTs, we present several means to detect different attacks in IoMTs

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.22 no.4
• /
• pp.913-921
• /
• 2012

On the strength of the rapid development and propagation of U-healthcare service, the service technologies are full of important changes. However, U-healthcare service has security problem that patient's biometric information can be easily exposed to the third party without service users' consent. This paper proposes a distributed model according authority and access level of hospital officials in order to safely access patients' private information in u-Healthcare Environment. Proposed model can both limit the access to patients' biometric information and keep safe system from DoS attack using time stamp. Also, it can prevent patients' data spill and privacy intrusion because the main server simultaneously controls hospital officials and the access by the access range of officials from each hospital.